9bd63280db885502dbee268e42237d96 | Triage

Sharing

General

Target

9bd63280db885502dbee268e42237d96
Size

86KB
MD5

9bd63280db885502dbee268e42237d96
SHA1

0bdb54c7105ad319974a420789ad12f6f124062e
SHA256

4660ca378d2a92637afb1fe73daab0a14253a152c644a2f1ee7997f11414265e
SHA512

069f2aa924f3f27703c93a898084b17a548bd86fe9ed45a809655b63f3ab064d8ce56005c59779745121893c83cbc5e2dcbc989818ee3fc6abc5ab21fd1bdc12
SSDEEP

1536:e00u2PyafIaj//ZV9k5cUkzJy6o3vWzuEogPn3j1axC4zx2b39qa+dPFNTv:5GyGj//hnr1y6oezuEogn3Uk4z+ga+ND

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
9bd63280db885502dbee268e42237d96
unpack001/out.upx

Files

9bd63280db885502dbee268e42237d96
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ